Bug 2162080 (CVE-2015-4004) - CVE-2015-4004 kernel: ozwpan: multiple out-of-bounds read issues
Summary: CVE-2015-4004 kernel: ozwpan: multiple out-of-bounds read issues
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2015-4004
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: Embargoed2152813
TreeView+ depends on / blocked
 
Reported: 2023-01-18 17:49 UTC by Mauro Matteo Cascella
Modified: 2023-03-15 10:16 UTC (History)
37 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-01-18 17:49:56 UTC

Attachments (Terms of Use)

Description Mauro Matteo Cascella 2023-01-18 17:49:30 UTC 
The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.

References:
https://lkml.org/lkml/2015/5/13/739
https://www.openwall.com/lists/oss-security/2015/06/05/7
Note You need to log in before you can comment on or make changes to this bug.